You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Simon Harwood <si...@simonharwood.co.uk> on 2020/07/29 13:27:39 UTC

Mailspike rules all return 0.0

Hello,

I have noticed that the mailspike rules are enabled in SpamAssasin but
all return zero values:

0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
0.0 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)

etc.

Please can you tell me where in the SpamAssassin configuration I find
the setting(s) that need to be changed such that non-zero values are
returned.
I have been receiving large quantities of spam that instead of just
being flagged as spam would have met the conditions for being rejected
completely if either of the mailspike values had been 0.1 or greater.

Thanks in advance,
Simon


Re: Fwd: Mailspike rules all return 0.0

Posted by "Kevin A. McGrail" <km...@apache.org>.
BTW, That was sarcasm.  I am worried about rule generation and the box
switchover so I apologize if it seems accusatory.  Just trying to dial what
is/is not working and why. :-)
--
Kevin A. McGrail
Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171


On Sun, Aug 2, 2020 at 11:36 AM Kevin A. McGrail <km...@apache.org>
wrote:

> Hege broke it is my new bumper sticker.
>
> On Sun, Aug 2, 2020, 10:38 Henrik K <he...@hege.li> wrote:
>
>>
>> Btw I grepped all update tarballs for the last year and it has been
>> always this way
>>
>> ./1864366/72_scores.cf:score RCVD_IN_MSPIKE_BL                     0.001
>> 0.001 0.001 0.001
>> ./1864366/72_scores.cf:score RCVD_IN_MSPIKE_L5                     0.001
>> 0.001 0.001 0.001
>> ...
>> ./1880477/72_scores.cf:score RCVD_IN_MSPIKE_BL                     0.001
>> 0.001 0.001 0.001
>> ./1880477/72_scores.cf:score RCVD_IN_MSPIKE_L5                     0.001
>> 0.001 0.001 0.001
>>
>> So please let's stop assuming every single thing is result of the
>> migration. :-D
>>
>>
>> On Wed, Jul 29, 2020 at 03:27:36PM -0400, Kevin A. McGrail wrote:
>> > Oh yes, the change one thing and wait 2 weeks...
>> >
>> >
>> > On 7/29/2020 3:21 PM, Henrik K wrote:
>> > > Juat have to wait and see what next weekend rescore does for net.  I
>> ran
>> > > many extra runs last time fixing things, who knows what happened..
>> > >
>> > > On Wed, Jul 29, 2020 at 02:52:17PM -0400, Kevin A. McGrail wrote:
>> > >> Henrik, might be something broken on the new system.
>> > >>
>> > >>
>> > >>
>> > >> -------- Forwarded Message --------
>> > >> Subject:   Re: Mailspike rules all return 0.0
>> > >> Date:      Wed, 29 Jul 2020 12:38:37 -0400
>> > >> From:      Bill Cole <sa...@billmail.scconsult.com>
>> > >> Reply-To:  users@spamassassin.apache.org
>> > >> To:        users@spamassassin.apache.org
>> > >>
>> > >>
>> > >>
>> > >> On 29 Jul 2020, at 9:27, Simon Harwood wrote:
>> > >>
>> > >>> Hello,
>> > >>>
>> > >>> I have noticed that the mailspike rules are enabled in SpamAssasin
>> but
>> > >>> all return zero values:
>> > >>>
>> > >>> 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
>> > >>> 0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
>> > >> This is actually a rounding issue: all RCVD_IN_MSPIKE_* rules are
>> being
>> > >> scored at +/- 0.001 by RuleQA so the score report rounds it to 0.0.
>> They
>> > >> are rescored that way because they are not hitting anything in the
>> > >> submitted corpora but have scores set in the static scores list.
>> > >>
>> > >> That MAY indicate a bug in RuleQA, since I don't believe that "net"
>> > >> rules like these should be rescored by RuleQA. Perhaps someone more
>> > >> familiar with the mechanics of RuleQA will correct me...
>> > >>
>> > >>
>> > >>> Please can you tell me where in the SpamAssassin configuration I
>> find
>> > >>> the setting(s) that need to be changed such that non-zero values are
>> > >>> returned.
>> > >>> I have been receiving large quantities of spam that instead of just
>> > >>> being flagged as spam would have met the conditions for being
>> rejected
>> > >>> completely if either of the mailspike values had been 0.1 or
>> greater.
>> > >> As Claudio said, local.cf is the place. Where your local.cf should
>> be
>> > >> depends on how your SpamAssassin was built, but there should be a
>> > >> baseline version in the site rules directory. You can find that with:
>> > >>
>> > >> spamassassin --lint -D config 2>&1 |grep 'site rules dir'
>> > >>
>> > >>
>> > >> --
>> > >> Bill Cole
>> > >> bill@scconsult.com or billcole@apache.org
>> > >> (AKA @grumpybozo and many *@billmail.scconsult.com addresses)
>> > >> Not For Hire (currently)
>> > >>
>> > --
>> > Kevin A. McGrail
>> > KMcGrail@Apache.org
>> >
>> > Member, Apache Software Foundation
>> > Chair Emeritus Apache SpamAssassin Project
>> > https://www.linkedin.com/in/kmcgrail - 703.798.0171
>>
>

Re: Fwd: Mailspike rules all return 0.0

Posted by "Kevin A. McGrail" <km...@apache.org>.
Hege broke it is my new bumper sticker.

On Sun, Aug 2, 2020, 10:38 Henrik K <he...@hege.li> wrote:

>
> Btw I grepped all update tarballs for the last year and it has been always
> this way
>
> ./1864366/72_scores.cf:score RCVD_IN_MSPIKE_BL                     0.001
> 0.001 0.001 0.001
> ./1864366/72_scores.cf:score RCVD_IN_MSPIKE_L5                     0.001
> 0.001 0.001 0.001
> ...
> ./1880477/72_scores.cf:score RCVD_IN_MSPIKE_BL                     0.001
> 0.001 0.001 0.001
> ./1880477/72_scores.cf:score RCVD_IN_MSPIKE_L5                     0.001
> 0.001 0.001 0.001
>
> So please let's stop assuming every single thing is result of the
> migration. :-D
>
>
> On Wed, Jul 29, 2020 at 03:27:36PM -0400, Kevin A. McGrail wrote:
> > Oh yes, the change one thing and wait 2 weeks...
> >
> >
> > On 7/29/2020 3:21 PM, Henrik K wrote:
> > > Juat have to wait and see what next weekend rescore does for net.  I
> ran
> > > many extra runs last time fixing things, who knows what happened..
> > >
> > > On Wed, Jul 29, 2020 at 02:52:17PM -0400, Kevin A. McGrail wrote:
> > >> Henrik, might be something broken on the new system.
> > >>
> > >>
> > >>
> > >> -------- Forwarded Message --------
> > >> Subject:   Re: Mailspike rules all return 0.0
> > >> Date:      Wed, 29 Jul 2020 12:38:37 -0400
> > >> From:      Bill Cole <sa...@billmail.scconsult.com>
> > >> Reply-To:  users@spamassassin.apache.org
> > >> To:        users@spamassassin.apache.org
> > >>
> > >>
> > >>
> > >> On 29 Jul 2020, at 9:27, Simon Harwood wrote:
> > >>
> > >>> Hello,
> > >>>
> > >>> I have noticed that the mailspike rules are enabled in SpamAssasin
> but
> > >>> all return zero values:
> > >>>
> > >>> 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
> > >>> 0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
> > >> This is actually a rounding issue: all RCVD_IN_MSPIKE_* rules are
> being
> > >> scored at +/- 0.001 by RuleQA so the score report rounds it to 0.0.
> They
> > >> are rescored that way because they are not hitting anything in the
> > >> submitted corpora but have scores set in the static scores list.
> > >>
> > >> That MAY indicate a bug in RuleQA, since I don't believe that "net"
> > >> rules like these should be rescored by RuleQA. Perhaps someone more
> > >> familiar with the mechanics of RuleQA will correct me...
> > >>
> > >>
> > >>> Please can you tell me where in the SpamAssassin configuration I find
> > >>> the setting(s) that need to be changed such that non-zero values are
> > >>> returned.
> > >>> I have been receiving large quantities of spam that instead of just
> > >>> being flagged as spam would have met the conditions for being
> rejected
> > >>> completely if either of the mailspike values had been 0.1 or greater.
> > >> As Claudio said, local.cf is the place. Where your local.cf should be
> > >> depends on how your SpamAssassin was built, but there should be a
> > >> baseline version in the site rules directory. You can find that with:
> > >>
> > >> spamassassin --lint -D config 2>&1 |grep 'site rules dir'
> > >>
> > >>
> > >> --
> > >> Bill Cole
> > >> bill@scconsult.com or billcole@apache.org
> > >> (AKA @grumpybozo and many *@billmail.scconsult.com addresses)
> > >> Not For Hire (currently)
> > >>
> > --
> > Kevin A. McGrail
> > KMcGrail@Apache.org
> >
> > Member, Apache Software Foundation
> > Chair Emeritus Apache SpamAssassin Project
> > https://www.linkedin.com/in/kmcgrail - 703.798.0171
>

Re: Fwd: Mailspike rules all return 0.0

Posted by Henrik K <he...@hege.li>.
Btw I grepped all update tarballs for the last year and it has been always this way

./1864366/72_scores.cf:score RCVD_IN_MSPIKE_BL                     0.001 0.001 0.001 0.001
./1864366/72_scores.cf:score RCVD_IN_MSPIKE_L5                     0.001 0.001 0.001 0.001
...
./1880477/72_scores.cf:score RCVD_IN_MSPIKE_BL                     0.001 0.001 0.001 0.001
./1880477/72_scores.cf:score RCVD_IN_MSPIKE_L5                     0.001 0.001 0.001 0.001

So please let's stop assuming every single thing is result of the migration. :-D


On Wed, Jul 29, 2020 at 03:27:36PM -0400, Kevin A. McGrail wrote:
> Oh yes, the change one thing and wait 2 weeks...
> 
> 
> On 7/29/2020 3:21 PM, Henrik K wrote:
> > Juat have to wait and see what next weekend rescore does for net.  I ran
> > many extra runs last time fixing things, who knows what happened..
> >
> > On Wed, Jul 29, 2020 at 02:52:17PM -0400, Kevin A. McGrail wrote:
> >> Henrik, might be something broken on the new system.
> >>
> >>
> >>
> >> -------- Forwarded Message --------
> >> Subject: 	Re: Mailspike rules all return 0.0
> >> Date: 	Wed, 29 Jul 2020 12:38:37 -0400
> >> From: 	Bill Cole <sa...@billmail.scconsult.com>
> >> Reply-To: 	users@spamassassin.apache.org
> >> To: 	users@spamassassin.apache.org
> >>
> >>
> >>
> >> On 29 Jul 2020, at 9:27, Simon Harwood wrote:
> >>
> >>> Hello,
> >>>
> >>> I have noticed that the mailspike rules are enabled in SpamAssasin but
> >>> all return zero values:
> >>>
> >>> 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
> >>> 0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
> >> This is actually a rounding issue: all RCVD_IN_MSPIKE_* rules are being
> >> scored at +/- 0.001 by RuleQA so the score report rounds it to 0.0. They
> >> are rescored that way because they are not hitting anything in the
> >> submitted corpora but have scores set in the static scores list.
> >>
> >> That MAY indicate a bug in RuleQA, since I don't believe that "net"
> >> rules like these should be rescored by RuleQA. Perhaps someone more
> >> familiar with the mechanics of RuleQA will correct me...
> >>
> >>
> >>> Please can you tell me where in the SpamAssassin configuration I find
> >>> the setting(s) that need to be changed such that non-zero values are
> >>> returned.
> >>> I have been receiving large quantities of spam that instead of just
> >>> being flagged as spam would have met the conditions for being rejected
> >>> completely if either of the mailspike values had been 0.1 or greater.
> >> As Claudio said, local.cf is the place. Where your local.cf should be
> >> depends on how your SpamAssassin was built, but there should be a
> >> baseline version in the site rules directory. You can find that with:
> >>
> >> spamassassin --lint -D config 2>&1 |grep 'site rules dir'
> >>
> >>
> >> -- 
> >> Bill Cole
> >> bill@scconsult.com or billcole@apache.org
> >> (AKA @grumpybozo and many *@billmail.scconsult.com addresses)
> >> Not For Hire (currently)
> >>
> -- 
> Kevin A. McGrail
> KMcGrail@Apache.org
> 
> Member, Apache Software Foundation
> Chair Emeritus Apache SpamAssassin Project
> https://www.linkedin.com/in/kmcgrail - 703.798.0171

Re: Fwd: Mailspike rules all return 0.0

Posted by "Kevin A. McGrail" <km...@apache.org>.
Oh yes, the change one thing and wait 2 weeks...


On 7/29/2020 3:21 PM, Henrik K wrote:
> Juat have to wait and see what next weekend rescore does for net.  I ran
> many extra runs last time fixing things, who knows what happened..
>
> On Wed, Jul 29, 2020 at 02:52:17PM -0400, Kevin A. McGrail wrote:
>> Henrik, might be something broken on the new system.
>>
>>
>>
>> -------- Forwarded Message --------
>> Subject: 	Re: Mailspike rules all return 0.0
>> Date: 	Wed, 29 Jul 2020 12:38:37 -0400
>> From: 	Bill Cole <sa...@billmail.scconsult.com>
>> Reply-To: 	users@spamassassin.apache.org
>> To: 	users@spamassassin.apache.org
>>
>>
>>
>> On 29 Jul 2020, at 9:27, Simon Harwood wrote:
>>
>>> Hello,
>>>
>>> I have noticed that the mailspike rules are enabled in SpamAssasin but
>>> all return zero values:
>>>
>>> 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
>>> 0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
>> This is actually a rounding issue: all RCVD_IN_MSPIKE_* rules are being
>> scored at +/- 0.001 by RuleQA so the score report rounds it to 0.0. They
>> are rescored that way because they are not hitting anything in the
>> submitted corpora but have scores set in the static scores list.
>>
>> That MAY indicate a bug in RuleQA, since I don't believe that "net"
>> rules like these should be rescored by RuleQA. Perhaps someone more
>> familiar with the mechanics of RuleQA will correct me...
>>
>>
>>> Please can you tell me where in the SpamAssassin configuration I find
>>> the setting(s) that need to be changed such that non-zero values are
>>> returned.
>>> I have been receiving large quantities of spam that instead of just
>>> being flagged as spam would have met the conditions for being rejected
>>> completely if either of the mailspike values had been 0.1 or greater.
>> As Claudio said, local.cf is the place. Where your local.cf should be
>> depends on how your SpamAssassin was built, but there should be a
>> baseline version in the site rules directory. You can find that with:
>>
>> spamassassin --lint -D config 2>&1 |grep 'site rules dir'
>>
>>
>> -- 
>> Bill Cole
>> bill@scconsult.com or billcole@apache.org
>> (AKA @grumpybozo and many *@billmail.scconsult.com addresses)
>> Not For Hire (currently)
>>
-- 
Kevin A. McGrail
KMcGrail@Apache.org

Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171


Re: Fwd: Mailspike rules all return 0.0

Posted by Henrik K <he...@hege.li>.
Juat have to wait and see what next weekend rescore does for net.  I ran
many extra runs last time fixing things, who knows what happened..

On Wed, Jul 29, 2020 at 02:52:17PM -0400, Kevin A. McGrail wrote:
> Henrik, might be something broken on the new system.
> 
> 
> 
> -------- Forwarded Message --------
> Subject: 	Re: Mailspike rules all return 0.0
> Date: 	Wed, 29 Jul 2020 12:38:37 -0400
> From: 	Bill Cole <sa...@billmail.scconsult.com>
> Reply-To: 	users@spamassassin.apache.org
> To: 	users@spamassassin.apache.org
> 
> 
> 
> On 29 Jul 2020, at 9:27, Simon Harwood wrote:
> 
> > Hello,
> >
> > I have noticed that the mailspike rules are enabled in SpamAssasin but
> > all return zero values:
> >
> > 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
> > 0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
> 
> This is actually a rounding issue: all RCVD_IN_MSPIKE_* rules are being
> scored at +/- 0.001 by RuleQA so the score report rounds it to 0.0. They
> are rescored that way because they are not hitting anything in the
> submitted corpora but have scores set in the static scores list.
> 
> That MAY indicate a bug in RuleQA, since I don't believe that "net"
> rules like these should be rescored by RuleQA. Perhaps someone more
> familiar with the mechanics of RuleQA will correct me...
> 
> 
> > Please can you tell me where in the SpamAssassin configuration I find
> > the setting(s) that need to be changed such that non-zero values are
> > returned.
> > I have been receiving large quantities of spam that instead of just
> > being flagged as spam would have met the conditions for being rejected
> > completely if either of the mailspike values had been 0.1 or greater.
> 
> As Claudio said, local.cf is the place. Where your local.cf should be
> depends on how your SpamAssassin was built, but there should be a
> baseline version in the site rules directory. You can find that with:
> 
> spamassassin --lint -D config 2>&1 |grep 'site rules dir'
> 
> 
> -- 
> Bill Cole
> bill@scconsult.com or billcole@apache.org
> (AKA @grumpybozo and many *@billmail.scconsult.com addresses)
> Not For Hire (currently)
> 

Fwd: Mailspike rules all return 0.0

Posted by "Kevin A. McGrail" <km...@apache.org>.
Henrik, might be something broken on the new system.



-------- Forwarded Message --------
Subject: 	Re: Mailspike rules all return 0.0
Date: 	Wed, 29 Jul 2020 12:38:37 -0400
From: 	Bill Cole <sa...@billmail.scconsult.com>
Reply-To: 	users@spamassassin.apache.org
To: 	users@spamassassin.apache.org



On 29 Jul 2020, at 9:27, Simon Harwood wrote:

> Hello,
>
> I have noticed that the mailspike rules are enabled in SpamAssasin but
> all return zero values:
>
> 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
> 0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

This is actually a rounding issue: all RCVD_IN_MSPIKE_* rules are being
scored at +/- 0.001 by RuleQA so the score report rounds it to 0.0. They
are rescored that way because they are not hitting anything in the
submitted corpora but have scores set in the static scores list.

That MAY indicate a bug in RuleQA, since I don't believe that "net"
rules like these should be rescored by RuleQA. Perhaps someone more
familiar with the mechanics of RuleQA will correct me...


> Please can you tell me where in the SpamAssassin configuration I find
> the setting(s) that need to be changed such that non-zero values are
> returned.
> I have been receiving large quantities of spam that instead of just
> being flagged as spam would have met the conditions for being rejected
> completely if either of the mailspike values had been 0.1 or greater.

As Claudio said, local.cf is the place. Where your local.cf should be
depends on how your SpamAssassin was built, but there should be a
baseline version in the site rules directory. You can find that with:

spamassassin --lint -D config 2>&1 |grep 'site rules dir'


-- 
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not For Hire (currently)


Re: Mailspike rules all return 0.0

Posted by Kris Deugau <kd...@vianet.ca>.
Bill Cole wrote:
> On 29 Jul 2020, at 9:27, Simon Harwood wrote:
> 
>> Hello,
>>
>> I have noticed that the mailspike rules are enabled in SpamAssasin but
>> all return zero values:
>>
>> 0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
>> 0.0 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
> 
> This is actually a rounding issue: all RCVD_IN_MSPIKE_* rules are being 
> scored at +/- 0.001 by RuleQA so the score report rounds it to 0.0. They 
> are rescored that way because they are not hitting anything in the 
> submitted corpora but have scores set in the static scores list.
> 
> That MAY indicate a bug in RuleQA, since I don't believe that "net" 
> rules like these should be rescored by RuleQA. Perhaps someone more 
> familiar with the mechanics of RuleQA will correct me...

I can't say about a RuleQA bug, but when these were first added I 
investigated to see if they'd be worth a datafeed.

For our mail flow, they hit on a fair bit of mail....  but nearly all of 
the messages were pretty strongly ham or spam without the MailSpike 
hits, and they weren't hitting the intermediate mail, so I disabled them 
all.

A quick crude eyeball through my personal domain's mail log (runs nearly 
pure stock SA modulo minor Debianisms) shows plenty of hits, but the ham 
is already strongly hammy (scores 0 to -10 or so) and the spam is 
strongly spammy (only a light sprinkling at 9, and most of them close to 
or over 20).

-kgd

Re: Mailspike rules all return 0.0

Posted by Bill Cole <sa...@billmail.scconsult.com>.
On 29 Jul 2020, at 9:27, Simon Harwood wrote:

> Hello,
>
> I have noticed that the mailspike rules are enabled in SpamAssasin but
> all return zero values:
>
> 0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
> 0.0 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)

This is actually a rounding issue: all RCVD_IN_MSPIKE_* rules are being 
scored at +/- 0.001 by RuleQA so the score report rounds it to 0.0. They 
are rescored that way because they are not hitting anything in the 
submitted corpora but have scores set in the static scores list.

That MAY indicate a bug in RuleQA, since I don't believe that "net" 
rules like these should be rescored by RuleQA. Perhaps someone more 
familiar with the mechanics of RuleQA will correct me...


> Please can you tell me where in the SpamAssassin configuration I find
> the setting(s) that need to be changed such that non-zero values are
> returned.
> I have been receiving large quantities of spam that instead of just
> being flagged as spam would have met the conditions for being rejected
> completely if either of the mailspike values had been 0.1 or greater.

As Claudio said, local.cf is the place. Where your local.cf should be 
depends on how your SpamAssassin was built, but there should be a 
baseline version in the site rules directory. You can find that with:

    spamassassin --lint -D config 2>&1 |grep 'site rules dir'


-- 
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not For Hire (currently)

Re: Mailspike rules all return 0.0

Posted by RW <rw...@googlemail.com>.
On Wed, 29 Jul 2020 15:43:09 +0200
Claudio Kuenzler wrote:

> On Debian based systems these rules are probably in
> /usr/share/spamassassin. However you should not modify these rules but
> rather overwrite the scoring.
> 
> You can do this in */etc/spamassassin/local.cf <http://local.cf>*,
> just add something like this:
> 
> score RCVD_IN_MSPIKE_BL 0 4 0 4
> score RCVD_IN_MSPIKE_L5 0 4 0 4
> 
> This would add 4 points to the scoring when these rules matched.

Note that RCVD_IN_MSPIKE_BL is implied by  RCVD_IN_MSPIKE_L5. 




Re: Mailspike rules all return 0.0

Posted by Simon Harwood <si...@simonharwood.co.uk>.
Thank you.
I will give that a go.


On 29/07/2020 02:43 pm, Claudio Kuenzler wrote:
> On Debian based systems these rules are probably in
> /usr/share/spamassassin. However you should not modify these rules but
> rather overwrite the scoring.
> 
> You can do this in */etc/spamassassin/local.cf <http://local.cf>*, just add
> something like this:
> 
> score RCVD_IN_MSPIKE_BL 0 4 0 4
> score RCVD_IN_MSPIKE_L5 0 4 0 4
> 
> This would add 4 points to the scoring when these rules matched.
> 
> On Wed, Jul 29, 2020 at 3:28 PM Simon Harwood <si...@simonharwood.co.uk>
> wrote:
> 
>> Hello,
>>
>> I have noticed that the mailspike rules are enabled in SpamAssasin but
>> all return zero values:
>>
>> 0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
>> 0.0 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
>>
>> etc.
>>
>> Please can you tell me where in the SpamAssassin configuration I find
>> the setting(s) that need to be changed such that non-zero values are
>> returned.
>> I have been receiving large quantities of spam that instead of just
>> being flagged as spam would have met the conditions for being rejected
>> completely if either of the mailspike values had been 0.1 or greater.
>>
>> Thanks in advance,
>> Simon
>>
>>
> 

Re: Mailspike rules all return 0.0

Posted by Claudio Kuenzler <na...@gmail.com>.
On Debian based systems these rules are probably in
/usr/share/spamassassin. However you should not modify these rules but
rather overwrite the scoring.

You can do this in */etc/spamassassin/local.cf <http://local.cf>*, just add
something like this:

score RCVD_IN_MSPIKE_BL 0 4 0 4
score RCVD_IN_MSPIKE_L5 0 4 0 4

This would add 4 points to the scoring when these rules matched.

On Wed, Jul 29, 2020 at 3:28 PM Simon Harwood <si...@simonharwood.co.uk>
wrote:

> Hello,
>
> I have noticed that the mailspike rules are enabled in SpamAssasin but
> all return zero values:
>
> 0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
> 0.0 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
>
> etc.
>
> Please can you tell me where in the SpamAssassin configuration I find
> the setting(s) that need to be changed such that non-zero values are
> returned.
> I have been receiving large quantities of spam that instead of just
> being flagged as spam would have met the conditions for being rejected
> completely if either of the mailspike values had been 0.1 or greater.
>
> Thanks in advance,
> Simon
>
>